CVE-2022-49604: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49604 is a vulnerability in the Linux kernel related to data races around sysctl_ip_fwd_use_pmtu. The vulnerability was discovered in the IP forwarding functionality where concurrent access to sysctl_ip_fwd_use_pmtu could occur without proper synchronization (Debian Security).

The vulnerability stems from a race condition in the Linux kernel's IP forwarding mechanism. Specifically, while reading sysctl_ip_fwd_use_pmtu, the value could be changed concurrently, leading to potential data races. The issue was fixed by adding READ_ONCE() to the readers of this variable. The vulnerability has a CVSS v3 score of 5.5, indicating moderate severity (Red Hat Portal).

The vulnerability affects the IP forwarding functionality in the Linux kernel, potentially impacting network routing decisions and path MTU discovery mechanisms. The race condition could lead to inconsistent behavior in IP forwarding operations (Debian Security).

The vulnerability was patched in various Linux kernel versions. The fix involves adding READ_ONCE() to properly handle concurrent access to sysctl_ip_fwd_use_pmtu. The patch has been backported to multiple kernel versions including 5.10.234-1 for Debian bullseye and 6.1.128-1 for Debian bookworm (Debian Security).